Social security audits in Iraq have become more frequent and more thorough since the Social Security Law No. 18 of 2023 came into force. The Social Security Department reviews employer records to confirm that covered workers are registered, that contributions are calculated on the correct base and that payments are made on time. Audits may be routine, triggered by a clearance application, prompted by an employee complaint or linked to a labour inspection. Whatever the trigger, the outcome can be a significant assessment of arrears, penalties and fines.
Employers that understand what auditors look for, and that have corrected obvious issues in advance, are in a much stronger position.
The 2023 law gives the department powers to examine records, request information and assess contributions due. Late payments attract a penalty of 1% per month after 120 days, capped at 100%, and violations can lead to fines of between 1 and 5 million IQD. Employers can object to assessments and, if necessary, challenge them before the courts.
What social security audits in Iraq examine
Auditors typically review:
- Registration of the employer and workers.
- Headcount compared with payroll, tax filings and permits.
- Wages declared compared with payroll.
- Timeliness of declarations and payments.
- Treatment of allowances, bonuses and in-kind benefits.
- Subcontractor and labour supply arrangements.
Common findings
- Unregistered workers, especially project, daily and part-time staff.
- Contribution base limited to basic salary.
- Late payments and unpaid penalties.
- Leavers not reported, or joiners registered late.
- Inconsistencies between entities in a group.
- Incorrect sector rate for oil and gas activities.
Responding during the audit
Employers should appoint a coordinator, provide documents in organised form, keep a log of requests and avoid providing unverified figures. Explanations should be in writing where possible.
Reviewing the findings
Before accepting findings, employers should check calculations, periods, rates and the classification of workers and pay elements. Errors in auditor calculations are not uncommon.
Corrective actions
- Register omitted workers.
- Correct the base and file amended declarations.
- Pay arrears to stop penalties increasing.
- Update payroll systems.
- Train HR and payroll staff.
Objecting
Where findings are disputed, employers should object within the deadline with evidence. Our litigation and dispute resolution team can assist.
Common mistakes
- Unorganised document production.
- Accepting findings without review.
- Delaying payment of undisputed amounts.
- Not fixing root causes.
Practical checklist
- Conduct an internal pre-audit review.
- Organise documents.
- Track auditor requests.
- Review findings carefully.
- Pay undisputed amounts promptly.
- Fix root causes.
Triggers for an audit
Knowing what triggers audits helps employers anticipate them. Common triggers include:
- Applications for social security clearance on project completion, liquidation or share transfer.
- Complaints from current or former employees about unpaid contributions or unrecognised service.
- Labour inspections that identify unregistered workers.
- Large differences between headcount reported to different authorities.
- Sharp reductions in declared wages or headcount without explanation.
- Sector-wide campaigns targeting industries with high informal employment, such as construction, hospitality and security services.
Employers in these situations should assume that an audit is likely and should prepare by running their own review first.
Running an internal pre-audit review
A pre-audit review replicates what the auditors will do. It compares headcount and wages across payroll, accounts, tax filings and declarations; tests a sample of employees from contract to payment to declaration; checks payment dates against deadlines; and reviews subcontract arrangements. The review should produce a short list of issues, an estimate of exposure for each and a recommended action, such as voluntary correction, documentation of a position or acceptance of a risk. Conducting the review under legal advice can help keep the analysis confidential while decisions are made.
Communicating with auditors
The tone of communication matters. Employers that are cooperative, organised and factual tend to achieve better outcomes than those that are defensive or slow. Practical points include:
- Confirm requests in writing and agree reasonable deadlines.
- Provide documents in the form requested, with an index.
- Explain complex arrangements, such as secondments or group transfers, in a short written note with supporting documents.
- Avoid volunteering estimates that have not been checked.
- Keep a copy of everything provided.
After the audit
Once the audit is concluded, employers should update their procedures to address the root causes of the findings. If the finding was unregistered seasonal staff, onboarding should be changed; if it was the contribution base, payroll codes should be reviewed. The department may revisit the employer in later years, and repeated findings on the same issue are likely to be treated more severely. A short post-audit report to management, setting out findings, amounts paid and changes made, helps ensure the lessons are retained.
Kurdistan Region audits
Employers in Kurdistan Region are reviewed under the Region’s own system. Groups operating in both jurisdictions should prepare for audits separately, because records, rates and practice may differ.
Audit of subcontractor compliance
Auditors may ask main contractors for information about subcontractor workforces, particularly where subcontractor workers are on the main contractor’s site. Main contractors should have subcontractor registration evidence ready and should be able to show that they monitored compliance during the project. Where a subcontractor has defaulted, the main contractor should be able to demonstrate the steps it took, such as withholding payment or requiring correction.
Illustrative example. A food processing company is audited after a former employee complains. Auditors find 60 seasonal workers unregistered and allowances excluded. The company accepts the seasonal worker finding, disputes the classification of a meal allowance as part of the base, pays undisputed arrears and objects to the remainder.
Key takeaways
- Social security audits in Iraq focus on registration, base and timeliness.
- Common findings are predictable and preventable.
- Findings should be reviewed before acceptance.
- Prompt corrective action limits penalties.
How Etihad Law Firm Can Help?
Preparation turns social security audits in Iraq into manageable reviews rather than costly surprises.
Etihad Law Firm supports employers through audits, findings and objections as part of our employment law services.